Indirect PI — Data Destruction Instruction via Agent File/Document Tool - ATR-2026-00716 (141d5f98-3ad1-5b1d-a707-f6a2aca6ba99)
Detects indirect prompt injection payloads that instruct an agent to delete, purge, or destroy files, documents, or records: deleting clinical documents, removing project files, wiping directories, or destroying specific data stores. Distinct from system-sabotage (which targets OS/kernel) and exfil-and-destroy (which combines exfil with deletion) — this rule targets data destruction as a standalone action via document or file management tools. Source: indirect-pi-data-destruction-carrier / indirect-pi-data-destruction.